Have I Been Pwned on new websites
Breach-notification service whose domain search lets owners monitor a domain for exposed accounts.
- Sites using Have I Been Pwned
- 447
- since Apr 2026
- Last 30 days
- 0.0%
-
of new sites, to Oct 19
no change on the 30 days before - Last 7 days
- 0.0%
- of new sites, 7-day average
no change on the week before
| First seen | Apr 23, 2026 |
|---|---|
| Last seen | Oct 19, 2026 |
| Website | haveibeenpwned.com |
What we found
- Have I Been Pwned appeared on about 120 new sites in the last 30 days.[1]
Share of new sites using Have I Been Pwned
The line is the 7-day average share of new sites that use Have I Been Pwned, since 10 September.
Who uses Have I Been Pwned
| Type | Sites | Share | Bar |
|---|---|---|---|
| Developer Tools | 33 | 15.9% | |
| Productivity | 31 | 15.0% | |
| Finance | 23 | 11.1% | |
| Education | 19 | 9.2% | |
| Health | 19 | 9.2% | |
| Marketing | 17 | 8.2% | |
| AI | 14 | 6.8% | |
| Social | 12 | 5.8% | |
| Content | 9 | 4.4% | |
| Crypto | 7 | 3.4% | |
| E-commerce | 7 | 3.4% | |
| Hiring & HR | 7 | 3.4% |
| Country | Sites | Share | Bar |
|---|---|---|---|
 US |
10 | 22.2% | |
 France |
6 | 13.3% | |
 Australia |
4 | 8.9% | |
 UK |
4 | 8.9% | |
 Canada |
3 | 6.7% | |
 India |
3 | 6.7% | |
 Singapore |
2 | 4.4% | |
 Brazil |
1 | 2.2% | |
 Switzerland |
1 | 2.2% | |
 Germany |
1 | 2.2% | |
 Greece |
1 | 2.2% | |
 Hong Kong SAR China |
1 | 2.2% |
| Ending | Sites | Share | Bar |
|---|---|---|---|
| .com | 231 | 51.8% | |
| .app | 53 | 11.9% | |
| .fr | 17 | 3.8% | |
| .io | 16 | 3.6% | |
| .uk | 12 | 2.7% | |
| .co | 11 | 2.5% | |
| .ai | 10 | 2.2% | |
| .dev | 9 | 2.0% | |
| .in | 9 | 2.0% | |
| .org | 8 | 1.8% | |
| .me | 7 | 1.6% | |
| .tech | 7 | 1.6% |
| Sites | Green | Bar |
|---|---|---|
| Have I Been Pwned | 50% | |
| All new sites | 47% |
Security on new sites
| # | Movement | Tool | Share of category | Bar | |
|---|---|---|---|---|---|
| 1 | – | HSTS | 87.5% | ||
| 2 | – |
Cloudflare Bot Management
|
25.2% | ||
| 3 | – |
Google reCAPTCHA
|
3.5% | ||
| 4 | ▲1 |
Anubis
|
0.2% | ||
| 5 | ▼2 |
DDoS-Guard
|
0.2% | ||
| … | |||||
| 19 | – |
Have I Been Pwned
|
<0.1% | ||
All-time shares across the new sites we track: of all of them, and of the sites using any Security tool. Have I Been Pwned is typically used alongside HSTS rather than instead of it. All 399 in Security
Often used with Have I Been Pwned
| Tool | Sites with both | vs all new sites |
|---|---|---|
Supabase
|
133 | 33x |
Vercel
|
170 | 2.9x |
Next.js
|
155 | 2.5x |
Google Search Console
|
182 | 2.2x |
Tools that turn up far more often on Have I Been Pwned sites than on new sites in general, and how many times as common each one is there.
Recently launched products built on Have I Been Pwned
310 of the 447 sites using Have I Been Pwned are product launches we list individually. The other 137 are new business and personal sites: they count towards the figures above but are not listed here. A watch sends them to you.
Japan
Showing the most recent 12 of 310.
Watches, exports and the API give you all 447 sites using Have I Been Pwned, from £15 a month.
Notes
- These figures cover websites that went live since April 2026, not the web as a whole.
- Country comes from what each site says about itself, such as a company registration, legal terms or a phone number, not just its domain ending. We count a country only where it is stated plainly enough to be sure: a governing-law clause or company registration number on a legal page, a phone country code, or a country domain ending. Sites that publish none are not counted at all.
- Green hosting is the share whose web host The Green Web Foundation lists as running on green energy, among sites checked since 1 April 2026, against the same share for every new site we checked over that time. Data from The Green Web Foundation.
How this page is made
FirstSited looks at each new website near the day it goes live and records what it was built with. We do not go back later, so these figures describe what sites launch with, not what they run today. A site counts towards Have I Been Pwned when we detect Have I Been Pwned on it at that look.
Every share on this page is a proportion of the new sites we were tracking at the time. Sites we found across the wider web count towards the figures, but only product launches are listed by name. How we detect technologies · How we find new sites